From feabccfaf487e0b5f399567e681538ea9d25d70a Mon Sep 17 00:00:00 2001 From: Tim Abbott Date: Tue, 27 Apr 2021 12:45:10 -0700 Subject: [PATCH] security: Adjust default nag deadline from 12 to 18 months. --- zproject/default_settings.py | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/zproject/default_settings.py b/zproject/default_settings.py index ce29143fb6..7081090951 100644 --- a/zproject/default_settings.py +++ b/zproject/default_settings.py @@ -442,5 +442,8 @@ NAGIOS_BOT_HOST = EXTERNAL_HOST # Use half of the available CPUs for data import purposes. DEFAULT_DATA_EXPORT_IMPORT_PARALLELISM = (len(os.sched_getaffinity(0)) // 2) or 1 -# How long after the last upgrade to nag users that the server is insecure -SERVER_UPGRADE_NAG_DEADLINE = 365 +# How long after the last upgrade to nag users that the server needs +# to be upgraded because of likely security releases in the meantime. +# Default is 18 months, constructed as 12 months before someone should +# upgrade, plus 6 months for the system administrator to get around to it. +SERVER_UPGRADE_NAG_DEADLINE = 30 * 18